Exam 312-50v12 topic 1 question 154 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 154
Topic #: 1

A penetration tester is performing an enumeration on a client's network. The tester has acquired permission to perform enumeration activities. They have identified a remote inter-process communication (IPC) share and are trying to collect more information about it. The tester decides to use a common enumeration technique to collect the desired data. Which of the following techniques would be most appropriate for this scenario?

A. Probe the IPC share by attempting to brute force admin credentials
B. Brute force Active Directory
C. Extract usernames using email IDs
D. Conduct a DNS zone transfer

Show Suggested Answer

Suggested Answer: A 🗳️

by DarioReymag at Feb. 6, 2024, 10:38 p.m.

Comments

Submit Cancel

duke_of_kamulu

Highly Voted 12 months ago

ANS A pg 401 During enumeration, attackers may stumble upon a remote inter-process communication (IPC) share, such as IPC$ in Windows, which they can probe further to connect to an administrative share by brute-forcing admin credentials and obtain complete information about the file-system listing that the share represents.

upvoted 6 times

...

cloudgangster

Highly Voted 1 year ago

Selected Answer: A

The answer is A, i can only answer what i know. pg 401 CEH V12

upvoted 5 times

...

LordXander

Most Recent 10 months, 3 weeks ago

Selected Answer: A

So, it is A...however is a very...barbarian way of doing it. Under normal circumstances, without the handbook I would've gone for D since this is authorised and a I simply ask to do a DNS zone transfer. But then we have the page 401...and we know EC likes to have their most correct answer, so...A

upvoted 1 times

...

insaniunt

1 year ago

Selected Answer: A

A. Probe the IPC share by attempting to brute force admin credentials

upvoted 3 times

insaniunt

1 year ago

During enumeration, attackers may stumble upon a remote inter-process communication (IPC) share, such as IPC$ in Windows, which they can probe further to connect to an administrative share by brute-forcing admin credentials and obtain complete information about the file-system listing that the share represents

upvoted 5 times

...